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"}, @enc_lim={0x4, 0x1, 0x14}, @jumbo={0xc2, 0x4, 0xffff}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x2, [0x8]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x2f, 0x2, [], [@hao={0xc9, 0x10, @private1}]}}}, @dstopts={{0x130, 0x29, 0x37, {0x32, 0x22, [], [@hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x1, [0x0]}, @generic={0x5, 0xb3, "fd95459ce272d3826bb900dd9da1294040229f433a57e63cb36e8acb780d4d42f25b8f5e3dd8d1a2dc54b43893419c5782d33708a2b64010d4a588d2e547ac17956362aef0aa514a675e16df7864d1ea6d1204a51c01d410eec68d34f2d547e2837f8443b0d4b6f656138f8d2c0fa44af769b5020a0c64b3c086d0a7fcac6251b68c42a110f6ee3d04e05ce507e0c0e8e712709d4bea285317677cb285d64481d86908d4c8bbf8f4c76c626e0492d7ba2ed064"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x40, 0x5, [0x3d7e, 0x0, 0xbf51]}}, @generic={0x80, 0x1a, "e53b46842b45ab07bb755815c80d812ea2c20bc3324c3209cfce"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim, @ra={0x5, 0x2, 0x401}]}}}], 0x11b0}, 0x40) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 23:20:30 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x5000000, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 572.918590][T23572] device hsr0 left promiscuous mode [ 573.111159][T23574] device hsr0 entered promiscuous mode [ 573.119707][T23574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.129342][T23578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.150191][T23578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.183140][T23578] device hsr0 entered promiscuous mode [ 573.190576][T23606] device hsr0 left promiscuous mode 23:20:31 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1880fe000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:31 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1805dc000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:31 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) 23:20:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180040030000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:31 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x13375987}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 573.607676][T23638] hub 9-0:1.0: USB hub found 23:20:31 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) [ 573.628758][T23638] hub 9-0:1.0: 8 ports detected 23:20:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000040000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 573.684128][T23607] device hsr0 entered promiscuous mode [ 573.691981][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:31 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:31 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x40000, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 573.933129][T23625] device hsr0 left promiscuous mode 23:20:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000100000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 574.494768][T23626] device hsr0 left promiscuous mode [ 574.598533][T23629] device hsr0 entered promiscuous mode [ 574.608725][T23629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.622319][T23630] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 23:20:32 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:32 executing program 5: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r3 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 23:20:32 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180003400000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:32 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 574.643413][T23630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.660960][T23630] device hsr0 entered promiscuous mode [ 574.675081][T23652] device hsr0 left promiscuous mode 23:20:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:32 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000200"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:33 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 575.134709][T23656] device hsr0 entered promiscuous mode [ 575.154072][T23656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 575.207110][T23674] device hsr0 left promiscuous mode 23:20:33 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:33 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) [ 575.869253][T23675] device hsr0 left promiscuous mode [ 576.211308][T23678] device hsr0 left promiscuous mode [ 576.331957][T23683] device hsr0 entered promiscuous mode [ 576.344194][T23683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.356083][T23684] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.377519][T23684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.402851][T23684] device hsr0 entered promiscuous mode [ 576.421304][T23682] device hsr0 entered promiscuous mode 23:20:34 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 576.434466][T23682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.468107][T23703] device hsr0 left promiscuous mode 23:20:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="bb0addcde156b52ef814a69802e38000a0314fd6929f0f22a2b6ce77a6b02b5c05e7080c2a6d2608ed19e1a3e147e526f3a9f30d3ece6b9baae7d944c272b2dbdcb196b91349bd6dc1441b604a7761319cb935f42f26ad43c5b637eb1648e0b069b69d4fc96f439a519c8924c7b6b0b4a821870eab34a8cfea1c20b661e9a7958dfcf68e5c09339d0eb93150d10e5e6026e2d51491102ef0c63a688db0b2612ce78c12e27b937adb915bcf6bab378eba94bf1b2dd90c399ba04542293f7661bfaf187c62190e9fd30e32049b49a5dfb7cd416ed1dc71cf8d429126be5077ca5079a442e59c766da98089adbf9b5cd23b7392e4c5be0464c35163b1"}) 23:20:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:34 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) 23:20:34 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:34 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) 23:20:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 576.721081][T23735] hub 9-0:1.0: USB hub found [ 576.734217][T23735] hub 9-0:1.0: 8 ports detected [ 576.863391][T23735] hub 5-0:1.0: USB hub found [ 576.869400][T23735] hub 5-0:1.0: 1 port detected 23:20:34 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 576.987133][T23707] device hsr0 entered promiscuous mode [ 576.998320][T23707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000600"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:34 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="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"}) [ 577.269022][T23721] device hsr0 left promiscuous mode [ 577.356519][T23753] hub 9-0:1.0: USB hub found [ 577.396241][T23753] hub 9-0:1.0: 8 ports detected 23:20:35 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 577.575983][T23753] hub 5-0:1.0: USB hub found [ 577.585908][T23753] hub 5-0:1.0: 1 port detected [ 577.636438][T23725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.676811][T23725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.706763][T23725] device hsr0 entered promiscuous mode 23:20:35 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x0, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000700"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:35 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="bb0addcde156b52ef814a69802e38000a0314fd6929f0f22a2b6ce77a6b02b5c05e7080c2a6d2608ed19e1a3e147e526f3a9f30d3ece6b9baae7d944c272b2dbdcb196b91349bd6dc1441b604a7761319cb935f42f26ad43c5b637eb1648e0b069b69d4fc96f439a519c8924c7b6b0b4a821870eab34a8cfea1c20b661e9a7958dfcf68e5c09339d0eb93150d10e5e6026e2d51491102ef0c63a688db0b2612ce78c12e27b937adb915bcf6bab378eba94bf1b2dd90c399ba04542293f7661bfaf187c62190e9fd30e32049b49a5dfb7cd416ed1dc71cf8d429126be5077ca5079a442e59c766da98089adbf9b5cd23b7392e4c5be0464c35163b1"}) [ 577.733621][T23728] device hsr0 left promiscuous mode [ 577.849804][T23786] hub 9-0:1.0: USB hub found [ 577.878791][T23786] hub 9-0:1.0: 8 ports detected [ 577.977147][T23791] hub 5-0:1.0: USB hub found [ 577.996430][T23791] hub 5-0:1.0: 1 port detected [ 578.092854][T23734] device hsr0 entered promiscuous mode [ 578.105347][T23734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:36 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000800"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:36 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="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"}) 23:20:36 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 578.349516][T23759] device hsr0 left promiscuous mode [ 578.457878][T23810] hub 9-0:1.0: USB hub found [ 578.477944][T23810] hub 9-0:1.0: 8 ports detected [ 578.585754][T23810] hub 5-0:1.0: USB hub found [ 578.592866][T23810] hub 5-0:1.0: 1 port detected [ 578.707808][T23763] device hsr0 entered promiscuous mode [ 578.719126][T23763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:36 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000900"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:36 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 579.030302][T23788] device hsr0 left promiscuous mode 23:20:37 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x0, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="bb0addcde156b52ef814a69802e38000a0314fd6929f0f22a2b6ce77a6b02b5c05e7080c2a6d2608ed19e1a3e147e526f3a9f30d3ece6b9baae7d944c272b2dbdcb196b91349bd6dc1441b604a7761319cb935f42f26ad43c5b637eb1648e0b069b69d4fc96f439a519c8924c7b6b0b4a821870eab34a8cfea1c20b661e9a7958dfcf68e5c09339d0eb93150d10e5e6026e2d51491102ef0c63a688db0b2612ce78c12e27b937adb915bcf6bab378eba94bf1b2dd90c399ba04542293f7661bfaf187c62190e9fd30e32049b49a5dfb7cd416ed1dc71cf8d429126be5077ca5079a442e59c766da98089adbf9b5cd23b7392e4c5be0464c35163b1"}) 23:20:37 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000a00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 579.318158][T23790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 579.329167][T23790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.341122][T23790] device hsr0 entered promiscuous mode [ 579.352124][T23807] device hsr0 left promiscuous mode [ 579.438243][T23842] hub 9-0:1.0: USB hub found [ 579.445433][T23842] hub 9-0:1.0: 8 ports detected [ 579.608835][T23842] hub 5-0:1.0: USB hub found [ 579.615219][T23842] hub 5-0:1.0: 1 port detected [ 579.684554][T23811] device hsr0 entered promiscuous mode [ 579.691252][T23811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 579.724423][T23830] device hsr0 left promiscuous mode 23:20:37 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:37 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000e00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0x3f, 0x4, &(0x7f00000003c0)="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"}) 23:20:37 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 579.902743][T23860] hub 9-0:1.0: USB hub found [ 579.914687][T23860] hub 9-0:1.0: 8 ports detected [ 580.085552][T23860] hub 5-0:1.0: USB hub found [ 580.102517][T23860] hub 5-0:1.0: 1 port detected [ 580.214537][T23835] device hsr0 entered promiscuous mode [ 580.220913][T23835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:38 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:38 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 580.453471][T23848] device hsr0 left promiscuous mode [ 580.803988][T23851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.828609][T23851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.861189][T23851] device hsr0 entered promiscuous mode [ 580.892024][T23871] device hsr0 left promiscuous mode 23:20:38 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x0, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000380)) 23:20:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001100"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:38 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 581.018239][T23905] hub 9-0:1.0: USB hub found [ 581.034511][T23905] hub 9-0:1.0: 8 ports detected [ 581.106685][T23905] hub 5-0:1.0: USB hub found [ 581.126423][T23905] hub 5-0:1.0: 1 port detected [ 581.344524][T23874] device hsr0 entered promiscuous mode [ 581.356848][T23874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 581.377506][T23886] device hsr0 left promiscuous mode 23:20:39 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001f00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:39 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:39 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 581.579890][T23927] hub 9-0:1.0: USB hub found [ 581.613785][T23927] hub 9-0:1.0: 8 ports detected 23:20:39 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 581.721959][T23934] hub 5-0:1.0: USB hub found [ 581.743957][T23934] hub 5-0:1.0: 1 port detected [ 581.885170][T23888] device hsr0 entered promiscuous mode [ 581.891738][T23888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:39 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000002900"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:39 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 582.184407][T23909] device hsr0 left promiscuous mode 23:20:40 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) 23:20:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000003f00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:40 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 582.406938][T23913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 582.418641][T23913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.431220][T23913] device hsr0 entered promiscuous mode [ 582.439228][T23931] device hsr0 left promiscuous mode [ 582.533024][T23964] hub 9-0:1.0: USB hub found [ 582.551018][T23964] hub 9-0:1.0: 8 ports detected [ 582.792923][T23933] device hsr0 entered promiscuous mode [ 582.802641][T23933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 582.823906][T23950] device hsr0 left promiscuous mode 23:20:40 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000004000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) [ 582.976300][T23982] hub 9-0:1.0: USB hub found [ 583.005790][T23982] hub 9-0:1.0: 8 ports detected 23:20:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) [ 583.343100][T23952] device hsr0 entered promiscuous mode [ 583.349749][T23952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.380968][T23969] device hsr0 left promiscuous mode 23:20:41 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000006000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:41 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) [ 583.519033][T24000] hub 9-0:1.0: USB hub found [ 583.547587][T24000] hub 9-0:1.0: 8 ports detected [ 583.805951][T23973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.820472][T23973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.843951][T23973] device hsr0 entered promiscuous mode 23:20:41 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:41 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x4) socket$caif_stream(0x25, 0x1, 0x0) 23:20:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18ffffff8d00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:41 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 583.863657][T23988] device hsr0 left promiscuous mode [ 583.994975][T24023] hub 9-0:1.0: USB hub found [ 584.014317][T24023] hub 9-0:1.0: 8 ports detected [ 584.269017][T23991] device hsr0 entered promiscuous mode [ 584.278477][T23991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:42 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:42 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 23:20:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000005dc00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:42 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18fffffdef00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 584.475662][T24045] hub 9-0:1.0: USB hub found [ 584.495455][T24045] hub 9-0:1.0: 8 ports detected [ 584.640526][T24006] device hsr0 left promiscuous mode [ 584.948937][T24010] device hsr0 entered promiscuous mode [ 584.956636][T24010] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:42 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:42 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$caif_stream(0x25, 0x1, 0x0) 23:20:42 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 585.080831][T24062] hub 9-0:1.0: USB hub found [ 585.086856][T24062] hub 9-0:1.0: 8 ports detected [ 585.158300][T24027] device hsr0 left promiscuous mode 23:20:43 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x0, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18fffffff500"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:43 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 585.339991][T24029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 585.351725][T24029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 585.364831][T24029] device hsr0 entered promiscuous mode [ 585.382161][T24052] device hsr0 left promiscuous mode [ 585.463929][T24080] hub 9-0:1.0: USB hub found [ 585.474340][T24080] hub 9-0:1.0: 8 ports detected [ 585.832574][T24055] device hsr0 entered promiscuous mode [ 585.840826][T24055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:43 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:43 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000080fe00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 586.027193][T24101] hub 9-0:1.0: USB hub found [ 586.048266][T24101] hub 9-0:1.0: 8 ports detected 23:20:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18effdffff00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 586.166207][T24066] device hsr0 left promiscuous mode [ 586.432710][T24067] device hsr0 entered promiscuous mode [ 586.439268][T24067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:44 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:44 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:44 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 586.584552][T24120] hub 9-0:1.0: USB hub found [ 586.589808][T24120] hub 9-0:1.0: 8 ports detected [ 586.753522][T24084] device hsr0 left promiscuous mode [ 586.969833][T24089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 586.994533][T24089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.007209][T24089] device hsr0 entered promiscuous mode [ 587.015763][T24104] device hsr0 left promiscuous mode 23:20:44 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="187fffffff00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:44 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:44 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 587.112837][T24141] hub 9-0:1.0: USB hub found [ 587.133986][T24141] hub 9-0:1.0: 8 ports detected [ 587.363863][T24107] device hsr0 entered promiscuous mode [ 587.373648][T24107] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.419562][T24126] device hsr0 left promiscuous mode 23:20:45 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="188dffffff00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:45 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 587.560969][T24156] hub 9-0:1.0: USB hub found [ 587.581006][T24156] hub 9-0:1.0: 8 ports detected 23:20:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18f5ffffff00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 587.884751][T24127] device hsr0 entered promiscuous mode [ 587.895418][T24127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:45 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:45 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 588.042204][T24178] hub 9-0:1.0: USB hub found [ 588.054388][T24178] hub 9-0:1.0: 8 ports detected [ 588.184595][T24144] device hsr0 left promiscuous mode [ 588.412279][T24149] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 588.427263][T24149] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.440328][T24149] device hsr0 entered promiscuous mode [ 588.450148][T24167] device hsr0 left promiscuous mode 23:20:46 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:46 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 588.651115][T24201] hub 9-0:1.0: USB hub found [ 588.667839][T24201] hub 9-0:1.0: 8 ports detected [ 588.882291][T24172] device hsr0 entered promiscuous mode [ 588.888881][T24172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:46 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:46 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 589.026319][T24216] hub 9-0:1.0: USB hub found [ 589.038547][T24216] hub 9-0:1.0: 8 ports detected 23:20:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 589.225920][T24184] device hsr0 left promiscuous mode [ 589.493425][T24187] device hsr0 entered promiscuous mode [ 589.502628][T24187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:47 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:47 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 589.650051][T24238] hub 9-0:1.0: USB hub found [ 589.665254][T24238] hub 9-0:1.0: 8 ports detected [ 589.787672][T24203] device hsr0 left promiscuous mode [ 590.063059][T24209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 590.092457][T24209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.104059][T24209] device hsr0 entered promiscuous mode 23:20:47 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:47 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:47 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 590.116350][T24226] device hsr0 left promiscuous mode [ 590.522140][T24231] device hsr0 entered promiscuous mode [ 590.528797][T24231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:48 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:48 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 590.666391][T24271] hub 9-0:1.0: USB hub found [ 590.678125][T24271] hub 9-0:1.0: 8 ports detected 23:20:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 590.844534][T24243] device hsr0 left promiscuous mode [ 590.932252][T24279] hub 9-0:1.0: USB hub found [ 590.954791][T24279] hub 9-0:1.0: 8 ports detected [ 591.248518][T24245] device hsr0 entered promiscuous mode [ 591.262269][T24245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:49 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:49 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) r3 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 591.409999][T24297] hub 9-0:1.0: USB hub found [ 591.418747][T24297] hub 9-0:1.0: 8 ports detected [ 591.550018][T24263] device hsr0 left promiscuous mode [ 591.764715][T24264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.776769][T24264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.788526][T24264] device hsr0 entered promiscuous mode [ 591.796728][T24281] device hsr0 left promiscuous mode 23:20:49 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:49 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:49 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) [ 591.892206][T24319] hub 9-0:1.0: USB hub found [ 591.898214][T24319] hub 9-0:1.0: 8 ports detected [ 592.182197][T24282] device hsr0 entered promiscuous mode [ 592.188767][T24282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 592.230776][T24304] device hsr0 left promiscuous mode 23:20:50 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:50 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x70, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0xa08, 0x5, 0x2fc000, 0x2, 0x1000, 0x1, 0x8}, 0xffffffffffffffff, 0x1, r0, 0x9) 23:20:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 592.407765][T24339] hub 9-0:1.0: USB hub found [ 592.435616][T24339] hub 9-0:1.0: 8 ports detected 23:20:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 592.773606][T24328] device hsr0 left promiscuous mode 23:20:50 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:50 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:20:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 592.983715][T24359] hub 9-0:1.0: USB hub found [ 593.001941][T24359] hub 9-0:1.0: 8 ports detected [ 593.160348][T24329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 593.185057][T24329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 593.209766][T24329] device hsr0 entered promiscuous mode [ 593.239850][T24342] device hsr0 left promiscuous mode 23:20:51 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) 23:20:51 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 593.366957][T24373] hub 9-0:1.0: USB hub found [ 593.396702][T24373] hub 9-0:1.0: 8 ports detected [ 593.692456][T24380] device hsr0 left promiscuous mode 23:20:51 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) 23:20:51 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:51 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 593.835152][T24400] hub 9-0:1.0: USB hub found [ 593.861545][T24400] hub 9-0:1.0: 8 ports detected 23:20:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:51 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) [ 594.131252][T24389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.150698][T24411] hub 9-0:1.0: USB hub found [ 594.167567][T24411] hub 9-0:1.0: 8 ports detected [ 594.186555][T24389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.249688][T24389] device hsr0 entered promiscuous mode 23:20:52 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:52 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:52 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) 23:20:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:52 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x0, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:52 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 594.497876][T24438] hub 9-0:1.0: USB hub found [ 594.532442][T24438] hub 9-0:1.0: 8 ports detected [ 594.569396][T24447] device hsr0 left promiscuous mode 23:20:52 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:52 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) [ 594.786163][T24466] hub 9-0:1.0: USB hub found [ 594.806321][T24466] hub 9-0:1.0: 8 ports detected 23:20:52 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 594.895738][T24471] hub 9-0:1.0: USB hub found [ 594.912820][T24471] hub 9-0:1.0: 8 ports detected 23:20:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:52 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 595.233013][T24490] hub 9-0:1.0: USB hub found [ 595.239482][T24451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.258471][T24490] hub 9-0:1.0: 8 ports detected [ 595.265172][T24451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.295851][T24451] device hsr0 entered promiscuous mode 23:20:53 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:53 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) 23:20:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:53 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:53 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:53 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 595.491928][T24498] hub 9-0:1.0: USB hub found [ 595.504233][T24504] device hsr0 left promiscuous mode [ 595.525280][T24498] hub 9-0:1.0: 8 ports detected 23:20:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:53 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:53 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) [ 595.894721][T24531] hub 9-0:1.0: USB hub found [ 595.916608][T24531] hub 9-0:1.0: 8 ports detected 23:20:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 595.959588][T24511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.977030][T24511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 596.003016][T24511] device hsr0 entered promiscuous mode 23:20:53 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) fcntl$setflags(r2, 0x2, 0x0) dup(r1) 23:20:53 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:53 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:53 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:53 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 596.257510][T24544] hub 9-0:1.0: USB hub found [ 596.262981][T24544] hub 9-0:1.0: 8 ports detected [ 596.284365][T24545] device hsr0 left promiscuous mode [ 596.366308][T24553] hub 9-0:1.0: USB hub found [ 596.386242][T24553] hub 9-0:1.0: 8 ports detected 23:20:54 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:54 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) dup(r1) 23:20:54 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 596.807256][T24584] hub 9-0:1.0: USB hub found 23:20:54 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 596.844649][T24584] hub 9-0:1.0: 8 ports detected 23:20:54 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) dup(r1) [ 596.959198][T24550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 596.983794][T24550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 23:20:54 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 597.037921][T24550] device hsr0 entered promiscuous mode 23:20:55 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 597.144346][T24595] hub 9-0:1.0: USB hub found [ 597.155452][T24595] hub 9-0:1.0: 8 ports detected 23:20:55 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r4 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) 23:20:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000ff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:55 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:55 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) dup(r1) [ 597.321812][T24609] device hsr0 left promiscuous mode 23:20:55 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18aaaaaafeff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 597.553984][T24622] hub 9-0:1.0: USB hub found [ 597.575564][T24622] hub 9-0:1.0: 8 ports detected 23:20:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:55 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) dup(r1) 23:20:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18a8aaaafffe"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 597.834196][T24638] hub 9-0:1.0: USB hub found [ 597.844106][T24638] hub 9-0:1.0: 8 ports detected 23:20:55 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 597.907021][T24612] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 597.937729][T24612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.005275][T24612] device hsr0 entered promiscuous mode 23:20:55 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:55 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) dup(r1) 23:20:55 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:55 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r3 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 23:20:55 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:56 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 598.207619][T24653] hub 9-0:1.0: USB hub found [ 598.222326][T24656] device hsr0 left promiscuous mode [ 598.237514][T24653] hub 9-0:1.0: 8 ports detected 23:20:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000ff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:56 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) dup(r1) 23:20:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:56 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) dup(0xffffffffffffffff) 23:20:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000ff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 598.637080][T24664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 598.671043][T24664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.696759][T24664] device hsr0 entered promiscuous mode [ 598.712743][T24689] hub 9-0:1.0: USB hub found [ 598.719273][T24677] device hsr0 entered promiscuous mode [ 598.732874][T24677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.756810][T24689] hub 9-0:1.0: 8 ports detected 23:20:56 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) dup(0xffffffffffffffff) 23:20:56 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:56 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:20:56 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:56 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 598.988718][T24703] device hsr0 left promiscuous mode [ 599.044791][T24710] hub 9-0:1.0: USB hub found [ 599.059051][T24710] hub 9-0:1.0: 8 ports detected 23:20:57 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) dup(0xffffffffffffffff) 23:20:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000007f"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:57 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 599.372018][T24735] hub 9-0:1.0: USB hub found [ 599.388698][T24735] hub 9-0:1.0: 8 ports detected 23:20:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000ff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 599.517005][T24709] device hsr0 left promiscuous mode 23:20:57 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:57 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 599.662999][T24749] hub 9-0:1.0: USB hub found [ 599.676556][T24749] hub 9-0:1.0: 8 ports detected [ 599.891219][T24712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.904268][T24712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.929911][T24712] device hsr0 entered promiscuous mode [ 599.947255][T24727] device hsr0 entered promiscuous mode [ 599.955393][T24727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:57 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180002000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:57 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:57 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:57 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:57 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:57 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 600.135202][T24760] hub 9-0:1.0: USB hub found [ 600.150975][T24760] hub 9-0:1.0: 8 ports detected 23:20:58 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180003000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 600.256879][T24761] device hsr0 left promiscuous mode 23:20:58 executing program 5: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:58 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 600.478445][T24789] hub 9-0:1.0: USB hub found 23:20:58 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180004000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 600.529792][T24789] hub 9-0:1.0: 8 ports detected 23:20:58 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:58 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:58 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 600.755222][T24767] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 600.781753][T24767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 600.798550][T24807] hub 9-0:1.0: USB hub found [ 600.812348][T24807] hub 9-0:1.0: 8 ports detected [ 600.834293][T24767] device hsr0 entered promiscuous mode [ 600.873164][T24777] device hsr0 left promiscuous mode [ 601.168913][T24791] device hsr0 entered promiscuous mode [ 601.176946][T24791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:20:59 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:20:59 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:20:59 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:20:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180005000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:59 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:59 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 601.325608][T24823] hub 9-0:1.0: USB hub found [ 601.343414][T24823] hub 9-0:1.0: 8 ports detected 23:20:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180006000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:59 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 601.571354][T24820] device hsr0 left promiscuous mode [ 601.703699][T24842] hub 9-0:1.0: USB hub found [ 601.719744][T24842] hub 9-0:1.0: 8 ports detected 23:20:59 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:20:59 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180007000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:20:59 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 602.079467][T24826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 602.103737][T24826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.110617][T24865] hub 9-0:1.0: USB hub found [ 602.125944][T24865] hub 9-0:1.0: 8 ports detected [ 602.166575][T24826] device hsr0 entered promiscuous mode [ 602.192242][T24845] device hsr0 left promiscuous mode [ 602.424234][T24851] device hsr0 entered promiscuous mode [ 602.433591][T24851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.474876][T24849] device hsr0 entered promiscuous mode [ 602.529650][T24849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:00 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:00 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180008000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:00 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:00 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:00 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 602.684577][T24877] hub 9-0:1.0: USB hub found [ 602.705198][T24877] hub 9-0:1.0: 8 ports detected 23:21:00 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180009000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:00 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 602.973307][T24878] device hsr0 left promiscuous mode 23:21:00 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000a000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 603.122074][T24908] hub 9-0:1.0: USB hub found [ 603.153766][T24908] hub 9-0:1.0: 8 ports detected 23:21:01 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:01 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 603.371532][T24919] hub 9-0:1.0: USB hub found [ 603.386366][T24919] hub 9-0:1.0: 8 ports detected [ 603.436672][T24881] device hsr0 left promiscuous mode [ 603.702007][T24884] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 603.720540][T24884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.743940][T24884] device hsr0 entered promiscuous mode [ 603.773882][T24886] device hsr0 left promiscuous mode [ 604.050872][T24896] device hsr0 entered promiscuous mode [ 604.062562][T24896] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 604.098398][T24895] device hsr0 entered promiscuous mode [ 604.105416][T24895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:02 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000e000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:02 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:02 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:02 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:02 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 604.248521][T24934] hub 9-0:1.0: USB hub found [ 604.297243][T24934] hub 9-0:1.0: 8 ports detected 23:21:02 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180010000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 604.326706][T24933] device hsr0 left promiscuous mode 23:21:02 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:02 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:02 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180011000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 604.647381][T24965] hub 9-0:1.0: USB hub found [ 604.688146][T24965] hub 9-0:1.0: 8 ports detected 23:21:02 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 604.930491][T24938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.951433][T24938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.976162][T24938] device hsr0 entered promiscuous mode [ 604.989588][T24947] device hsr0 left promiscuous mode [ 605.204200][T24952] device hsr0 left promiscuous mode [ 605.500648][T24963] device hsr0 entered promiscuous mode [ 605.508743][T24963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 605.542687][T24962] device hsr0 entered promiscuous mode [ 605.560871][T24962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:03 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:03 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180029000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:03 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:03 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:03 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 605.805126][T24997] hub 9-0:1.0: USB hub found [ 605.858034][T24997] hub 9-0:1.0: 8 ports detected 23:21:03 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:03 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180060000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 606.023233][T24996] device hsr0 left promiscuous mode 23:21:03 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:04 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 606.197374][T25024] hub 9-0:1.0: USB hub found [ 606.215377][T25024] hub 9-0:1.0: 8 ports detected 23:21:04 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800aa000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:04 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 606.541376][T25036] hub 9-0:1.0: USB hub found [ 606.551744][T25036] hub 9-0:1.0: 8 ports detected [ 606.567983][T24995] device hsr0 left promiscuous mode [ 606.916241][T25001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.944734][T25001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.973883][T25001] device hsr0 entered promiscuous mode [ 606.991983][T25003] device hsr0 entered promiscuous mode [ 606.998403][T25003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 607.041052][T25018] device hsr0 left promiscuous mode [ 607.371488][T25025] device hsr0 entered promiscuous mode [ 607.377992][T25025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:05 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000030000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:05 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:05 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000050000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 607.551531][T25052] hub 9-0:1.0: USB hub found [ 607.587208][T25052] hub 9-0:1.0: 8 ports detected 23:21:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 607.775517][T25048] device hsr0 left promiscuous mode 23:21:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800dc050000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:05 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:05 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 608.001503][T25079] hub 9-0:1.0: USB hub found [ 608.015990][T25079] hub 9-0:1.0: 8 ports detected 23:21:05 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000060000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 608.304662][T25053] device hsr0 left promiscuous mode [ 608.637922][T25054] device hsr0 left promiscuous mode [ 608.736432][T25055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.749040][T25055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.760968][T25055] device hsr0 entered promiscuous mode [ 608.768954][T25070] device hsr0 entered promiscuous mode [ 608.782355][T25070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:06 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:06 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:06 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:06 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000070000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:06 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:06 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 608.994518][T25106] hub 9-0:1.0: USB hub found [ 609.002004][T25106] hub 9-0:1.0: 8 ports detected [ 609.007293][T25105] device hsr0 left promiscuous mode 23:21:06 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000090000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:07 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:07 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000a0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 609.388474][T25135] hub 9-0:1.0: USB hub found [ 609.439850][T25135] hub 9-0:1.0: 8 ports detected 23:21:07 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) [ 609.657945][T25111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.682516][T25111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.711948][T25111] device hsr0 entered promiscuous mode [ 609.737127][T25113] device hsr0 left promiscuous mode [ 610.040486][T25127] device hsr0 entered promiscuous mode [ 610.050642][T25127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.076119][T25114] device hsr0 entered promiscuous mode [ 610.085785][T25114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:07 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:07 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:07 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000e0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:07 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:07 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r1 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 23:21:08 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 610.244987][T25159] hub 9-0:1.0: USB hub found [ 610.265110][T25159] hub 9-0:1.0: 8 ports detected 23:21:08 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0xffb5) dup(0xffffffffffffffff) 23:21:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000110000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:08 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 610.539644][T25160] device hsr0 left promiscuous mode [ 610.651783][T25183] hub 9-0:1.0: USB hub found [ 610.684531][T25183] hub 9-0:1.0: 8 ports detected 23:21:08 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) dup(0xffffffffffffffff) 23:21:08 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800001f0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:08 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 611.027320][T25200] hub 9-0:1.0: USB hub found [ 611.058212][T25200] hub 9-0:1.0: 8 ports detected [ 611.068768][T25164] device hsr0 left promiscuous mode [ 611.291274][T25170] device hsr0 entered promiscuous mode [ 611.298853][T25170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.322578][T25184] device hsr0 left promiscuous mode 23:21:09 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000290000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:09 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) dup(0xffffffffffffffff) 23:21:09 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:09 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r1 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) [ 611.527203][T25213] hub 9-0:1.0: USB hub found [ 611.553577][T25213] hub 9-0:1.0: 8 ports detected [ 611.770244][T25190] device hsr0 entered promiscuous mode [ 611.779962][T25190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.822079][T25228] device hsr0 left promiscuous mode 23:21:09 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:09 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800003f0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:09 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) dup(0xffffffffffffffff) 23:21:09 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:09 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r1 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) [ 612.078330][T25240] hub 9-0:1.0: USB hub found [ 612.114711][T25240] hub 9-0:1.0: 8 ports detected 23:21:10 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000400000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 612.365495][T25257] hub 9-0:1.0: USB hub found [ 612.391757][T25257] hub 9-0:1.0: 8 ports detected [ 612.498206][T25229] device hsr0 entered promiscuous mode [ 612.543551][T25229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 612.577021][T25247] device hsr0 left promiscuous mode 23:21:10 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:10 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:10 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000600000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:10 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:10 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 612.770688][T25270] hub 9-0:1.0: USB hub found [ 612.802269][T25270] hub 9-0:1.0: 8 ports detected [ 613.070421][T25280] device hsr0 left promiscuous mode 23:21:11 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800fe800000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:11 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:11 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x0, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:11 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 613.267358][T25297] hub 9-0:1.0: USB hub found 23:21:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180005dc0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 613.292987][T25297] hub 9-0:1.0: 8 ports detected 23:21:11 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 613.610902][T25296] device hsr0 left promiscuous mode [ 613.655670][T25318] hub 9-0:1.0: USB hub found [ 613.678052][T25318] hub 9-0:1.0: 8 ports detected 23:21:11 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:11 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180080fe0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:11 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:11 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000400300"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 614.101399][T25340] hub 9-0:1.0: USB hub found [ 614.127477][T25340] hub 9-0:1.0: 8 ports detected [ 614.192730][T25307] device hsr0 entered promiscuous mode [ 614.204645][T25307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.244465][T25313] device hsr0 entered promiscuous mode [ 614.251240][T25313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.292866][T25331] device hsr0 entered promiscuous mode 23:21:12 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:12 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:12 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:12 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 614.423050][T25331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:12 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 614.525955][T25349] hub 9-0:1.0: USB hub found [ 614.549501][T25349] hub 9-0:1.0: 8 ports detected 23:21:12 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 614.691675][T25355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.713278][T25355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.745104][T25355] device hsr0 entered promiscuous mode [ 614.768118][T25363] hub 9-0:1.0: USB hub found [ 614.781296][T25364] device hsr0 left promiscuous mode [ 614.794217][T25363] hub 9-0:1.0: 8 ports detected 23:21:12 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:12 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:12 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:12 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x81, 0x6, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000034000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 615.177915][T25390] hub 9-0:1.0: USB hub found [ 615.212270][T25390] hub 9-0:1.0: 8 ports detected [ 615.298625][T25395] hub 9-0:1.0: USB hub found [ 615.304001][T25395] hub 9-0:1.0: 8 ports detected [ 615.697153][T25367] device hsr0 left promiscuous mode [ 616.013205][T25387] device hsr0 left promiscuous mode 23:21:13 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:13 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:13 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:13 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:13 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 616.179337][T25413] hub 9-0:1.0: USB hub found [ 616.204449][T25413] hub 9-0:1.0: 8 ports detected 23:21:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000002"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:14 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:14 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 616.519901][T25424] hub 9-0:1.0: USB hub found [ 616.536950][T25424] hub 9-0:1.0: 8 ports detected [ 616.542107][T25391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 616.573161][T25391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.659327][T25391] device hsr0 entered promiscuous mode [ 616.729826][T25429] device hsr0 entered promiscuous mode [ 616.740170][T25429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:14 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000003"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:14 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:14 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 616.825288][T25428] device hsr0 entered promiscuous mode [ 616.842211][T25428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:14 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 616.925834][T25455] hub 9-0:1.0: USB hub found 23:21:14 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000004"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 616.947716][T25457] device hsr0 left promiscuous mode [ 616.955702][T25455] hub 9-0:1.0: 8 ports detected 23:21:14 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:14 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000005"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:15 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) [ 617.316485][T25479] hub 9-0:1.0: USB hub found [ 617.341594][T25479] hub 9-0:1.0: 8 ports detected [ 617.411126][T25487] hub 9-0:1.0: USB hub found [ 617.416414][T25487] hub 9-0:1.0: 8 ports detected 23:21:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000006"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:15 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 617.566934][T25460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.594013][T25460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.615663][T25460] device hsr0 entered promiscuous mode [ 617.638228][T25467] device hsr0 left promiscuous mode [ 617.654814][T25500] hub 9-0:1.0: USB hub found [ 617.667633][T25500] hub 9-0:1.0: 8 ports detected 23:21:15 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:15 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:15 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000007"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:15 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 617.845810][T25509] hub 9-0:1.0: USB hub found [ 617.856596][T25509] hub 9-0:1.0: 8 ports detected [ 617.975275][T25519] hub 9-0:1.0: USB hub found [ 617.992247][T25519] hub 9-0:1.0: 8 ports detected [ 618.318166][T25471] device hsr0 left promiscuous mode [ 618.600897][T25470] device hsr0 entered promiscuous mode [ 618.607388][T25470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.640872][T25480] device hsr0 entered promiscuous mode 23:21:16 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000008"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 618.659141][T25480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.714187][T25508] device hsr0 left promiscuous mode 23:21:16 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:16 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) 23:21:16 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:16 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000009"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 618.893642][T25536] hub 9-0:1.0: USB hub found [ 618.958911][T25536] hub 9-0:1.0: 8 ports detected 23:21:16 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) 23:21:17 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000a"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 619.307018][T25561] hub 9-0:1.0: USB hub found [ 619.324318][T25511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.338118][T25561] hub 9-0:1.0: 8 ports detected [ 619.353422][T25511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.389803][T25566] hub 9-0:1.0: USB hub found [ 619.394860][T25566] hub 9-0:1.0: 8 ports detected [ 619.400056][T25511] device hsr0 entered promiscuous mode [ 619.446438][T25533] device hsr0 left promiscuous mode 23:21:17 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:17 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000e"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:17 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) [ 619.653436][T25581] hub 9-0:1.0: USB hub found [ 619.664334][T25581] hub 9-0:1.0: 8 ports detected [ 619.870653][T25538] device hsr0 entered promiscuous mode [ 619.877221][T25538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:17 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x0, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:17 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 620.027323][T25592] hub 9-0:1.0: USB hub found [ 620.037083][T25592] hub 9-0:1.0: 8 ports detected [ 620.151235][T25557] device hsr0 left promiscuous mode [ 620.369458][T25559] device hsr0 entered promiscuous mode [ 620.376008][T25559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.448039][T25582] device hsr0 left promiscuous mode 23:21:18 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000010"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) 23:21:18 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 620.631713][T25614] hub 9-0:1.0: USB hub found [ 620.643917][T25614] hub 9-0:1.0: 8 ports detected 23:21:18 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000011"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) 23:21:18 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 620.918386][T25584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.942121][T25584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.984205][T25584] device hsr0 entered promiscuous mode [ 621.001254][T25630] hub 9-0:1.0: USB hub found [ 621.014832][T25597] device hsr0 left promiscuous mode [ 621.014843][T25630] hub 9-0:1.0: 8 ports detected 23:21:18 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:18 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) socket$caif_stream(0x25, 0x1, 0x0) 23:21:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000001f"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 621.221244][T25644] hub 9-0:1.0: USB hub found [ 621.227404][T25644] hub 9-0:1.0: 8 ports detected [ 621.432037][T25601] device hsr0 entered promiscuous mode [ 621.440534][T25601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:19 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:19 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 621.580825][T25654] hub 9-0:1.0: USB hub found [ 621.592501][T25654] hub 9-0:1.0: 8 ports detected [ 621.733073][T25628] device hsr0 left promiscuous mode [ 621.973977][T25638] device hsr0 entered promiscuous mode [ 621.982132][T25638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:19 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:19 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:19 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000029"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:19 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 622.029233][T25642] device hsr0 left promiscuous mode [ 622.172224][T25677] hub 9-0:1.0: USB hub found [ 622.199206][T25677] hub 9-0:1.0: 8 ports detected 23:21:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000003f"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:20 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:20 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 622.641132][T25645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 622.701254][T25645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 622.739306][T25645] device hsr0 entered promiscuous mode [ 622.755753][T25660] device hsr0 left promiscuous mode 23:21:20 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 23:21:20 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:20 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 622.875669][T25700] hub 9-0:1.0: USB hub found [ 622.897614][T25700] hub 9-0:1.0: 8 ports detected [ 623.159310][T25668] device hsr0 entered promiscuous mode [ 623.166024][T25668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:21 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:21 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 623.429829][T25683] device hsr0 left promiscuous mode [ 623.709115][T25685] device hsr0 entered promiscuous mode [ 623.717026][T25685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.741387][T25704] device hsr0 left promiscuous mode 23:21:21 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000060"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:21 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:21 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 623.896368][T25731] hub 9-0:1.0: USB hub found [ 623.919145][T25731] hub 9-0:1.0: 8 ports detected 23:21:21 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800ffffff8d"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:21 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:21 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 624.162419][T25708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 624.171015][T25746] hub 9-0:1.0: USB hub found [ 624.184581][T25746] hub 9-0:1.0: 8 ports detected [ 624.205713][T25708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.239699][ T3296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.247834][ T3296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.300247][T25708] device hsr0 entered promiscuous mode [ 624.331530][T25717] device hsr0 left promiscuous mode 23:21:22 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000005dc"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:22 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:22 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 624.470851][T25757] hub 9-0:1.0: USB hub found [ 624.492977][T25757] hub 9-0:1.0: 8 ports detected 23:21:22 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x0, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:22 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 624.679729][T25718] device hsr0 entered promiscuous mode [ 624.686202][T25718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 624.710439][T25740] device hsr0 left promiscuous mode [ 624.809368][T25768] hub 9-0:1.0: USB hub found [ 624.825603][T25768] hub 9-0:1.0: 8 ports detected [ 625.139012][T25742] device hsr0 entered promiscuous mode [ 625.145483][T25742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.190259][T25760] device hsr0 left promiscuous mode 23:21:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800fffffdef"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:23 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) 23:21:23 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:23 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 625.343095][T25790] hub 9-0:1.0: USB hub found [ 625.369870][T25790] hub 9-0:1.0: 8 ports detected 23:21:23 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) 23:21:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800fffffff5"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:23 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 625.631200][T25762] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.652579][T25804] hub 9-0:1.0: USB hub found [ 625.659149][T25762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.686961][T25804] hub 9-0:1.0: 8 ports detected 23:21:23 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000380)) dup(0xffffffffffffffff) socket$caif_stream(0x25, 0x1, 0x0) 23:21:23 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000080fe"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 625.715156][T25762] device hsr0 entered promiscuous mode [ 625.746074][T25770] device hsr0 left promiscuous mode 23:21:23 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) [ 626.132349][T25774] device hsr0 entered promiscuous mode [ 626.143886][T25774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:24 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:24 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800effdffff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:24 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 626.258729][T25831] hub 9-0:1.0: USB hub found [ 626.289780][T25831] hub 9-0:1.0: 8 ports detected [ 626.499094][T25802] device hsr0 left promiscuous mode 23:21:24 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18007fffffff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:24 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:24 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 626.828941][T25811] device hsr0 entered promiscuous mode [ 626.835415][T25811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 626.860443][T25820] device hsr0 left promiscuous mode [ 626.972551][T25859] hub 9-0:1.0: USB hub found [ 627.009579][T25859] hub 9-0:1.0: 8 ports detected 23:21:24 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18008dffffff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:25 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:25 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 627.266629][T25823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.281456][T25874] hub 9-0:1.0: USB hub found [ 627.288384][T25874] hub 9-0:1.0: 8 ports detected [ 627.308549][T25823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.356042][T25823] device hsr0 entered promiscuous mode [ 627.383184][T25843] device hsr0 left promiscuous mode 23:21:25 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 627.648784][T25845] device hsr0 entered promiscuous mode [ 627.656536][T25845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:25 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:25 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800f5ffffff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:25 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:25 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 627.784143][T25889] hub 9-0:1.0: USB hub found [ 627.845632][T25889] hub 9-0:1.0: 8 ports detected [ 628.048560][T25862] device hsr0 left promiscuous mode [ 628.383971][T25865] device hsr0 entered promiscuous mode [ 628.394428][T25865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:26 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:26 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:26 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:26 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 628.502045][T25881] device hsr0 left promiscuous mode [ 628.532336][T25914] hub 9-0:1.0: USB hub found [ 628.558479][T25914] hub 9-0:1.0: 8 ports detected [ 628.621808][T25916] hub 9-0:1.0: USB hub found [ 628.629921][T25916] hub 9-0:1.0: 8 ports detected 23:21:26 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:26 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) 23:21:26 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 628.855422][T25931] hub 9-0:1.0: USB hub found [ 628.876291][T25931] hub 9-0:1.0: 8 ports detected [ 628.936226][T25935] hub 9-0:1.0: USB hub found [ 628.944362][T25935] hub 9-0:1.0: 8 ports detected [ 628.980256][T25882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 629.010776][T25882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.047604][T25882] device hsr0 entered promiscuous mode [ 629.074411][T25902] device hsr0 left promiscuous mode 23:21:26 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 629.348675][T25903] device hsr0 entered promiscuous mode [ 629.354921][T25903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.392928][T25921] device hsr0 left promiscuous mode 23:21:27 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:27 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) 23:21:27 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 629.515619][T25954] hub 9-0:1.0: USB hub found [ 629.541726][T25954] hub 9-0:1.0: 8 ports detected [ 629.749379][T25928] device hsr0 entered promiscuous mode [ 629.756654][T25928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:27 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:27 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:27 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:27 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) dup(r0) socket$caif_stream(0x25, 0x1, 0x0) [ 629.986898][T25945] device hsr0 left promiscuous mode [ 630.084814][T25973] hub 9-0:1.0: USB hub found [ 630.099791][T25973] hub 9-0:1.0: 8 ports detected 23:21:28 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:28 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:28 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 630.442721][T25998] hub 9-0:1.0: USB hub found [ 630.450344][T25998] hub 9-0:1.0: 8 ports detected [ 630.599873][T25947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.620259][T25947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 630.641268][T25947] device hsr0 entered promiscuous mode [ 630.651819][T25972] device hsr0 left promiscuous mode 23:21:28 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast}}, {{@in=@private}, 0x0, @in6=@private1, 0x0, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) [ 631.184847][T25975] device hsr0 left promiscuous mode 23:21:29 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:29 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:29 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:29 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 631.406980][T26015] hub 9-0:1.0: USB hub found [ 631.414424][T26015] hub 9-0:1.0: 8 ports detected 23:21:29 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:29 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 631.611895][T26005] device hsr0 left promiscuous mode [ 631.725245][T26029] hub 9-0:1.0: USB hub found [ 631.743695][T26029] hub 9-0:1.0: 8 ports detected 23:21:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:29 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:29 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 632.071138][T26051] hub 9-0:1.0: USB hub found [ 632.089755][T26051] hub 9-0:1.0: 8 ports detected [ 632.101504][T26006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.146842][T26006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.188909][T26006] device hsr0 entered promiscuous mode [ 632.220736][T26036] device hsr0 entered promiscuous mode 23:21:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 632.363344][T26036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.404334][T26062] hub 9-0:1.0: USB hub found [ 632.415120][T26062] hub 9-0:1.0: 8 ports detected [ 632.423918][T26033] device hsr0 entered promiscuous mode 23:21:30 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:30 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 632.483459][T26033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:30 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:30 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 632.611786][T26070] hub 9-0:1.0: USB hub found [ 632.630977][T26070] hub 9-0:1.0: 8 ports detected [ 632.678204][T26078] device hsr0 left promiscuous mode [ 632.714707][T26081] hub 9-0:1.0: USB hub found 23:21:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 632.748419][T26081] hub 9-0:1.0: 8 ports detected 23:21:30 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:30 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:30 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 633.032426][T26105] hub 9-0:1.0: USB hub found 23:21:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 633.063561][T26105] hub 9-0:1.0: 8 ports detected [ 633.127872][T26108] hub 9-0:1.0: USB hub found [ 633.154060][T26108] hub 9-0:1.0: 8 ports detected 23:21:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 633.225892][T26113] hub 9-0:1.0: USB hub found [ 633.231060][T26113] hub 9-0:1.0: 8 ports detected [ 633.606197][T26082] device hsr0 left promiscuous mode 23:21:31 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:31 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:31 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:31 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:31 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) [ 633.885333][T26135] hub 9-0:1.0: USB hub found [ 633.891627][T26135] hub 9-0:1.0: 8 ports detected 23:21:31 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:31 executing program 2: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:31 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:31 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 634.236637][T26151] hub 9-0:1.0: USB hub found 23:21:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 634.302228][T26146] device hsr0 entered promiscuous mode [ 634.315976][T26151] hub 9-0:1.0: 8 ports detected 23:21:32 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 634.503632][T26146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.596840][T26164] device hsr0 entered promiscuous mode [ 634.602111][T26176] hub 9-0:1.0: USB hub found [ 634.612882][T26164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.614140][T26176] hub 9-0:1.0: 8 ports detected 23:21:32 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:32 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:32 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:32 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:32 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 634.774763][T26184] hub 9-0:1.0: USB hub found [ 634.784485][T26186] device hsr0 left promiscuous mode [ 634.801484][T26184] hub 9-0:1.0: 8 ports detected 23:21:32 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 634.989379][T26203] hub 9-0:1.0: USB hub found 23:21:32 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 635.050077][T26203] hub 9-0:1.0: 8 ports detected 23:21:33 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 635.210499][T26217] hub 9-0:1.0: USB hub found [ 635.230273][T26217] hub 9-0:1.0: 8 ports detected [ 635.297067][T26221] hub 9-0:1.0: USB hub found [ 635.319469][T26221] hub 9-0:1.0: 8 ports detected 23:21:33 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 635.389462][T26188] device hsr0 left promiscuous mode [ 635.534147][T26232] hub 9-0:1.0: USB hub found [ 635.551203][T26232] hub 9-0:1.0: 8 ports detected [ 635.947419][T26193] device hsr0 left promiscuous mode [ 636.198067][T26196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 636.208992][T26196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.252060][T26196] device hsr0 entered promiscuous mode [ 636.276162][T26206] device hsr0 entered promiscuous mode [ 636.282749][T26206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:34 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:34 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:34 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:34 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 636.499945][T26251] hub 9-0:1.0: USB hub found [ 636.535152][T26251] hub 9-0:1.0: 8 ports detected [ 636.582423][T26254] device hsr0 left promiscuous mode 23:21:34 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:34 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:34 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 637.066354][T26287] hub 9-0:1.0: USB hub found [ 637.086024][T26287] hub 9-0:1.0: 8 ports detected 23:21:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800aaaaaafe"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 637.172111][T26263] device hsr0 left promiscuous mode 23:21:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 637.372698][T26297] hub 9-0:1.0: USB hub found [ 637.390882][T26297] hub 9-0:1.0: 8 ports detected [ 637.567841][T26268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 637.597892][T26268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 637.637297][T26268] device hsr0 entered promiscuous mode 23:21:35 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:35 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:35 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:35 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 637.778399][T26305] hub 9-0:1.0: USB hub found [ 637.815791][T26311] device hsr0 left promiscuous mode [ 637.827497][T26305] hub 9-0:1.0: 8 ports detected 23:21:35 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800a8aaaaff"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:35 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:35 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 638.216356][T26341] hub 9-0:1.0: USB hub found [ 638.241438][T26341] hub 9-0:1.0: 8 ports detected [ 638.325565][T26345] hub 9-0:1.0: USB hub found [ 638.342921][T26345] hub 9-0:1.0: 8 ports detected 23:21:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 638.376761][T26327] device hsr0 entered promiscuous mode [ 638.391857][T26327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.441375][T26334] device hsr0 entered promiscuous mode [ 638.456749][T26334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:36 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:36 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:36 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:36 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 638.651127][T26363] hub 9-0:1.0: USB hub found [ 638.661903][T26365] device hsr0 left promiscuous mode [ 638.671901][T26363] hub 9-0:1.0: 8 ports detected 23:21:36 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:36 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:36 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:36 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 639.032182][T26390] hub 9-0:1.0: USB hub found [ 639.055356][T26390] hub 9-0:1.0: 8 ports detected 23:21:37 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 639.296749][T26369] device hsr0 left promiscuous mode [ 639.339403][T26404] hub 9-0:1.0: USB hub found [ 639.356738][T26404] hub 9-0:1.0: 8 ports detected [ 639.426566][T26406] hub 9-0:1.0: USB hub found [ 639.434084][T26406] hub 9-0:1.0: 8 ports detected [ 639.747828][T26371] device hsr0 entered promiscuous mode [ 639.754210][T26371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:37 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:37 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:37 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:37 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 639.923624][T26419] hub 9-0:1.0: USB hub found [ 639.931187][T26419] hub 9-0:1.0: 8 ports detected [ 639.992935][T26426] hub 9-0:1.0: USB hub found [ 640.000536][T26426] hub 9-0:1.0: 8 ports detected 23:21:37 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000020000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:37 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:37 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:37 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 640.219230][T26438] hub 9-0:1.0: USB hub found [ 640.256728][T26438] hub 9-0:1.0: 8 ports detected 23:21:38 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000030000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:38 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:38 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:38 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x0, 0x4, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 640.580247][T26465] device hsr0 left promiscuous mode [ 640.630987][T26469] hub 9-0:1.0: USB hub found [ 640.655839][T26469] hub 9-0:1.0: 8 ports detected 23:21:38 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000040000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 640.750445][T26475] hub 9-0:1.0: USB hub found [ 640.763962][T26475] hub 9-0:1.0: 8 ports detected 23:21:38 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:38 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:38 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 641.067361][T26474] device hsr0 entered promiscuous mode [ 641.106415][T26503] hub 9-0:1.0: USB hub found 23:21:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000050000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 641.134256][T26503] hub 9-0:1.0: 8 ports detected [ 641.164814][T26474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 641.222261][T26505] hub 9-0:1.0: USB hub found [ 641.227427][T26505] hub 9-0:1.0: 8 ports detected [ 641.290628][T26494] device hsr0 entered promiscuous mode [ 641.310834][T26494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000060000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:39 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:39 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(0x0, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:39 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:39 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:39 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 641.686657][T26526] device hsr0 left promiscuous mode [ 641.702934][T26527] hub 9-0:1.0: USB hub found [ 641.726480][T26527] hub 9-0:1.0: 8 ports detected 23:21:39 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000070000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:39 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:39 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:39 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 642.084161][T26558] hub 9-0:1.0: USB hub found [ 642.110242][T26558] hub 9-0:1.0: 8 ports detected 23:21:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000080000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 642.236963][T26565] hub 9-0:1.0: USB hub found [ 642.243811][T26565] hub 9-0:1.0: 8 ports detected 23:21:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 642.452421][T26575] hub 9-0:1.0: USB hub found [ 642.488802][T26575] hub 9-0:1.0: 8 ports detected [ 642.726903][T26530] device hsr0 left promiscuous mode [ 642.927729][T26545] device hsr0 entered promiscuous mode [ 642.939344][T26545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 642.974542][T26536] device hsr0 entered promiscuous mode [ 642.988499][T26536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.006852][T26555] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 23:21:40 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:40 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:40 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000090000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:40 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:40 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) [ 643.054383][T26555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.140747][T26593] hub 9-0:1.0: USB hub found [ 643.145888][T26555] device hsr0 entered promiscuous mode [ 643.168026][T26593] hub 9-0:1.0: 8 ports detected 23:21:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000a0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:41 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:41 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:41 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 643.464793][T26594] device hsr0 left promiscuous mode [ 643.556436][T26617] hub 9-0:1.0: USB hub found [ 643.576966][T26617] hub 9-0:1.0: 8 ports detected 23:21:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000e0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:41 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:41 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 643.893516][T26634] hub 9-0:1.0: USB hub found [ 643.924053][T26634] hub 9-0:1.0: 8 ports detected [ 644.017705][T26598] device hsr0 entered promiscuous mode [ 644.028603][T26598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 644.062978][T26615] device hsr0 left promiscuous mode 23:21:41 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:41 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000100000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:41 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x0, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:41 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 644.266114][T26647] hub 9-0:1.0: USB hub found [ 644.305409][T26647] hub 9-0:1.0: 8 ports detected [ 644.758465][T26616] device hsr0 left promiscuous mode [ 644.936018][T26629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.947136][T26629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.960554][T26629] device hsr0 entered promiscuous mode [ 644.971805][T26656] device hsr0 left promiscuous mode 23:21:42 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000110000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:42 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x0, 0x2, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:42 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:42 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x0, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 645.195300][T26675] hub 9-0:1.0: USB hub found [ 645.245190][T26675] hub 9-0:1.0: 8 ports detected 23:21:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000290000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:43 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x0, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 645.651270][T26695] hub 9-0:1.0: USB hub found [ 645.672762][T26695] hub 9-0:1.0: 8 ports detected [ 645.740062][T26657] device hsr0 entered promiscuous mode [ 645.748459][T26657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:43 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:43 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000600000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:43 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x0, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:43 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 646.124930][T26679] device hsr0 left promiscuous mode [ 646.200984][T26710] hub 9-0:1.0: USB hub found [ 646.212971][T26710] hub 9-0:1.0: 8 ports detected [ 646.522599][T26677] device hsr0 entered promiscuous mode [ 646.535116][T26677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.561091][T26687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 23:21:44 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000aa0000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 646.596184][T26687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.651598][T26687] device hsr0 entered promiscuous mode [ 646.683825][T26712] device hsr0 left promiscuous mode 23:21:44 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000600000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:44 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:44 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x0, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:44 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000300"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 646.818138][T26734] hub 9-0:1.0: USB hub found [ 646.863416][T26734] hub 9-0:1.0: 8 ports detected 23:21:44 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x0, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:44 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 647.153384][T26751] hub 9-0:1.0: USB hub found [ 647.164940][T26751] hub 9-0:1.0: 8 ports detected [ 647.276628][T26715] device hsr0 entered promiscuous mode [ 647.284578][T26715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:45 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:45 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 647.476176][T26731] device hsr0 left promiscuous mode [ 647.489039][T26760] hub 9-0:1.0: USB hub found [ 647.521540][T26760] hub 9-0:1.0: 8 ports detected [ 647.830586][T26736] device hsr0 entered promiscuous mode [ 647.838620][T26736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:45 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:45 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000dc0500"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:45 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 647.982612][T26782] hub 9-0:1.0: USB hub found [ 648.017892][T26782] hub 9-0:1.0: 8 ports detected 23:21:45 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000600"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:45 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 648.169575][T26765] device hsr0 left promiscuous mode [ 648.274007][T26797] hub 9-0:1.0: USB hub found [ 648.288265][T26797] hub 9-0:1.0: 8 ports detected [ 648.557119][T26768] device hsr0 entered promiscuous mode [ 648.564177][T26768] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 648.588342][T26794] device hsr0 left promiscuous mode 23:21:46 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:46 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000700"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:46 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 648.730281][T26816] hub 9-0:1.0: USB hub found [ 648.749937][T26816] hub 9-0:1.0: 8 ports detected [ 649.057617][T26805] device hsr0 entered promiscuous mode [ 649.065159][T26805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:46 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x0, 0x8, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:46 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:46 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000900"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:46 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:46 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 649.205770][T26838] hub 9-0:1.0: USB hub found [ 649.231441][T26838] hub 9-0:1.0: 8 ports detected 23:21:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000a00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:47 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:47 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 649.459325][T26820] device hsr0 left promiscuous mode [ 649.535063][T26854] hub 9-0:1.0: USB hub found [ 649.545949][T26854] hub 9-0:1.0: 8 ports detected [ 649.617941][T26856] hub 9-0:1.0: USB hub found [ 649.622967][T26856] hub 9-0:1.0: 8 ports detected [ 649.896904][T26825] device hsr0 entered promiscuous mode [ 649.905046][T26825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 649.944058][T26855] device hsr0 left promiscuous mode 23:21:47 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:47 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x0, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:47 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000e00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:47 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 650.085479][T26873] hub 9-0:1.0: USB hub found [ 650.112874][T26873] hub 9-0:1.0: 8 ports detected [ 650.505586][T26860] device hsr0 entered promiscuous mode [ 650.512112][T26860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.541186][T26881] device hsr0 left promiscuous mode 23:21:48 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:48 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000a00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001100"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:48 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:48 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x0, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 650.733943][T26901] hub 9-0:1.0: USB hub found [ 650.790833][T26901] hub 9-0:1.0: 8 ports detected 23:21:48 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:48 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001f00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:48 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 651.102247][T26917] hub 9-0:1.0: USB hub found [ 651.128917][T26917] hub 9-0:1.0: 8 ports detected [ 651.158824][T26888] device hsr0 entered promiscuous mode [ 651.179433][T26888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 651.207847][T26922] hub 9-0:1.0: USB hub found [ 651.221876][T26922] hub 9-0:1.0: 8 ports detected [ 651.230620][T26909] device hsr0 left promiscuous mode 23:21:49 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:49 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x0, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000002900"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:49 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 651.430095][T26931] hub 9-0:1.0: USB hub found [ 651.487360][T26931] hub 9-0:1.0: 8 ports detected [ 651.762656][T26948] hub 9-0:1.0: USB hub found [ 651.773492][T26948] hub 9-0:1.0: 8 ports detected [ 651.800317][T26911] device hsr0 entered promiscuous mode [ 651.817348][T26911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:49 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:49 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000003f00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:49 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x0, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:49 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) [ 652.001924][T26956] hub 9-0:1.0: USB hub found [ 652.017690][T26956] hub 9-0:1.0: 8 ports detected 23:21:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000004000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 652.092122][T26962] hub 9-0:1.0: USB hub found [ 652.100183][T26962] hub 9-0:1.0: 8 ports detected 23:21:50 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x0, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:50 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 652.290153][T26935] device hsr0 left promiscuous mode [ 652.437276][T26976] hub 9-0:1.0: USB hub found [ 652.474763][T26976] hub 9-0:1.0: 8 ports detected [ 652.766107][T26937] device hsr0 entered promiscuous mode [ 652.773468][T26937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:50 executing program 3: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x8, 0x0, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) r6 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:21:50 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) 23:21:50 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000006000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:50 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 652.959308][T26993] hub 9-0:1.0: USB hub found [ 652.995642][T26993] hub 9-0:1.0: 8 ports detected [ 653.169671][T26977] device hsr0 left promiscuous mode [ 653.496789][T26981] device hsr0 entered promiscuous mode [ 653.504806][T26981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:21:51 executing program 0: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0xfffffffffffffffb, 0x0, 0x42a}, {0x0, 0x1, 0x8}, 0x2, 0x0, 0x2, 0x0, 0xd28fe753f3b54d49}, {{@in=@private, 0x4d6, 0x6c}, 0x0, @in6=@private1, 0x3501, 0x4, 0x2, 0x0, 0x4, 0x83, 0x7ff}}, 0xe8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @private=0xa010102}, 0x4, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="ca72511c807c22ca37ca5ab62aaf077355dcde541beecf0363da7a90384e99a4ae813dd2e7233dae9dfbe09db1d865c6e0537be960a36a07e154ebb60129870bc1", 0x41}], 0x1, &(0x7f0000000280)=[{0x10, 0x114}, {0x108, 0x102, 0x1, "1cdbf57df173911f9f26f503624a3743cfdc60c75102091933e12608b19700005599fd5d8662229d99acc6e796462fa3041a647cea29ef6f3f17aedcb4b45cff62b705a80c9f117f116d722229d08f7a98854406c650fbd2687e973ae485257545667750edf6d241572dbdb60a52fe539dd0815639be302c2183b9f40bb1e6850a1b749f5aa06c1db0a0aceb72f28f7cdada6338414c437848b071fde8c754fb902413da938e656525477c3114e9b1952666c039fc4eb20c6033765426415e1e62e7595706372ce2c058c7258858c81b8772ce40815b24c1c2bd7de85e24c993ea773463b31889e24f462e57f7bd7047a6d04ae75578"}, {0x10, 0x10d, 0x4ed}, {0x90, 0x84, 0x1f, "9bff12474df413ebd6bb4a259151e58401ad9ab8983e509be42879f067034c82e69a077aaf5fab7d64680cfee3671369f9dbcf751aa69a3163c51cf602f7a2845f633d3295e15a38b62e93aa440a4d0e3d189465e2b79fb6c2b2bbf9819a88f02c5799512d51167dde021e4891bda7e563fe8aba5132bcc2fd"}], 0x1b8}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'hsr0\x00', @link_local}) r5 = syz_io_uring_setup(0x89, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) 23:21:51 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x0, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="180000fe8000"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:51 executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_config_ext={0x9, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) 23:21:51 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) [ 653.543043][T27003] device hsr0 left promiscuous mode [ 653.668275][T27018] hub 9-0:1.0: USB hub found [ 653.687367][T27018] hub 9-0:1.0: 8 ports detected 23:21:51 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000005dc00"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 23:21:51 executing program 5: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x10001000, 0x9, 0x5, 0x0, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x73, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23:21:51 executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000008580)='/dev/bsg\x00', 0x591d01, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0xffb5) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0x1cde}, 0x841, 0x20, 0x0, 0x9, 0x5, 0x5, 0xfff}, 0x0, 0x2, r0, 0x8) r1 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1ec, 0x2000) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000380)) dup(r1) socket$caif_stream(0x25, 0x1, 0x0) [ 654.049935][T27005] device hsr0 entered promiscuous mode [ 654.057800][T27037] hub 9-0:1.0: USB hub found [ 654.075684][T27005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.106927][T27037] hub 9-0:1.0: 8 ports detected [ 654.256210][T27005] ================================================================== [ 654.267727][T27005] BUG: KASAN: use-after-free in idr_for_each+0x206/0x220 [ 654.277605][T27005] Read of size 8 at addr ffff8880322d26b8 by task syz-executor.3/27005 [ 654.287625][T27005] [ 654.290498][T27005] CPU: 0 PID: 27005 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 654.301257][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.313503][T27005] Call Trace: [ 654.318850][T27005] dump_stack+0x107/0x163 [ 654.326057][T27005] ? idr_for_each+0x206/0x220 [ 654.332779][T27005] ? idr_for_each+0x206/0x220 [ 654.338114][T27005] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 654.346944][T27005] ? idr_for_each+0x206/0x220 [ 654.353025][T27005] ? idr_for_each+0x206/0x220 [ 654.359150][T27005] kasan_report.cold+0x79/0xd5 [ 654.365588][T27005] ? idr_for_each+0x206/0x220 [ 654.370589][T27005] ? io_uring_add_task_file+0x2a0/0x2a0 [ 654.378229][T27005] idr_for_each+0x206/0x220 [ 654.383066][T27005] ? idr_find+0x50/0x50 [ 654.390443][T27005] ? lockdep_hardirqs_on+0x79/0x100 [ 654.399089][T27005] ? io_poll_remove_all+0x1df/0x240 [ 654.405821][T27005] io_ring_ctx_wait_and_kill+0x1bd/0x600 [ 654.411965][T27005] ? ima_file_free+0xb6/0x420 [ 654.418304][T27005] io_uring_release+0x3e/0x50 [ 654.424678][T27005] __fput+0x283/0x920 [ 654.430567][T27005] ? io_ring_ctx_wait_and_kill+0x600/0x600 [ 654.437833][T27005] task_work_run+0xdd/0x190 [ 654.443351][T27005] do_exit+0xc5c/0x2ae0 [ 654.448556][T27005] ? find_held_lock+0x2d/0x110 [ 654.454852][T27005] ? mm_update_next_owner+0x7a0/0x7a0 [ 654.460981][T27005] ? get_signal+0x332/0x20f0 [ 654.465876][T27005] ? lock_downgrade+0x6d0/0x6d0 [ 654.471803][T27005] do_group_exit+0x125/0x310 [ 654.477052][T27005] get_signal+0x427/0x20f0 [ 654.483250][T27005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 654.490501][T27005] ? sock_do_ioctl+0x168/0x2d0 [ 654.496173][T27005] ? compat_ifr_data_ioctl+0x150/0x150 [ 654.502894][T27005] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 654.511885][T27005] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 654.518494][T27005] ? __sanitizer_cov_trace_switch+0xb7/0xf0 [ 654.525892][T27005] ? copy_siginfo_to_user32+0xa0/0xa0 [ 654.531899][T27005] ? sock_ioctl+0x418/0x6a0 [ 654.536690][T27005] ? kick_process+0xe0/0x180 [ 654.542265][T27005] ? task_work_add+0x97/0x180 [ 654.547913][T27005] exit_to_user_mode_prepare+0x148/0x250 [ 654.554424][T27005] syscall_exit_to_user_mode+0x19/0x50 [ 654.560307][T27005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.566883][T27005] RIP: 0033:0x466019 [ 654.571305][T27005] Code: Unable to access opcode bytes at RIP 0x465fef. [ 654.578511][T27005] RSP: 002b:00007f2e6f589188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.587926][T27005] RAX: 0000000000000000 RBX: 000000000056c008 RCX: 0000000000466019 [ 654.601256][T27005] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 654.614661][T27005] RBP: 00000000004bd067 R08: 0000000000000000 R09: 0000000000000000 [ 654.625461][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 654.639908][T27005] R13: 0000000000a9fb1f R14: 00007f2e6f589300 R15: 0000000000022000 [ 654.651491][T27005] [ 654.654745][T27005] Allocated by task 27009: [ 654.661261][T27005] kasan_save_stack+0x1b/0x40 [ 654.666976][T27005] ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 654.674127][T27005] kmem_cache_alloc+0x1c6/0x440 [ 654.680080][T27005] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 654.687356][T27005] idr_get_free+0x554/0xa60 [ 654.698418][T27005] idr_alloc_u32+0x170/0x2d0 [ 654.716264][T27005] idr_alloc_cyclic+0x102/0x230 [ 654.722350][T27005] __do_sys_io_uring_register+0x1639/0x4090 [ 654.729088][T27005] do_syscall_64+0x2d/0x70 [ 654.734635][T27005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.741628][T27005] [ 654.744594][T27005] Freed by task 4879: [ 654.750691][T27005] kasan_save_stack+0x1b/0x40 [ 654.756733][T27005] kasan_set_track+0x1c/0x30 [ 654.762539][T27005] kasan_set_free_info+0x20/0x30 [ 654.768856][T27005] ____kasan_slab_free+0xe1/0x110 [ 654.774314][T27005] slab_free_freelist_hook+0x5d/0x150 [ 654.780282][T27005] kmem_cache_free+0x82/0x350 [ 654.785875][T27005] rcu_core+0x5eb/0xf00 [ 654.790583][T27005] __do_softirq+0x29b/0x9f6 [ 654.795424][T27005] [ 654.798024][T27005] Last potentially related work creation: [ 654.806373][T27005] kasan_save_stack+0x1b/0x40 [ 654.811732][T27005] kasan_record_aux_stack+0xc5/0xf0 [ 654.818664][T27005] call_rcu+0xbb/0x700 [ 654.824952][T27005] delete_node+0x591/0x8c0 [ 654.830217][T27005] __radix_tree_delete+0x190/0x370 [ 654.836202][T27005] radix_tree_delete_item+0xe7/0x230 [ 654.843727][T27005] io_remove_personalities+0x1d/0x170 [ 654.852088][T27005] idr_for_each+0x113/0x220 [ 654.858179][T27005] io_ring_ctx_wait_and_kill+0x1bd/0x600 [ 654.866037][T27005] io_uring_release+0x3e/0x50 [ 654.870906][T27005] __fput+0x283/0x920 [ 654.875627][T27005] task_work_run+0xdd/0x190 [ 654.880489][T27005] do_exit+0xc5c/0x2ae0 [ 654.885249][T27005] do_group_exit+0x125/0x310 [ 654.891461][T27005] get_signal+0x427/0x20f0 [ 654.896385][T27005] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 654.904543][T27005] exit_to_user_mode_prepare+0x148/0x250 [ 654.913941][T27005] syscall_exit_to_user_mode+0x19/0x50 [ 654.920850][T27005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.927215][T27005] [ 654.929813][T27005] Second to last potentially related work creation: [ 654.936718][T27005] kasan_save_stack+0x1b/0x40 [ 654.941409][T27005] kasan_record_aux_stack+0xc5/0xf0 [ 654.947089][T27005] call_rcu+0xbb/0x700 [ 654.951430][T27005] delete_node+0xef/0x8c0 [ 654.955949][T27005] __radix_tree_delete+0x190/0x370 [ 654.961418][T27005] radix_tree_delete_item+0xe7/0x230 [ 654.967013][T27005] free_pid+0x9b/0x260 [ 654.971338][T27005] __change_pid+0x1c1/0x2d0 [ 654.976006][T27005] release_task+0xd29/0x14d0 [ 654.982006][T27005] wait_consider_task+0x2fd2/0x3b70 [ 654.988300][T27005] do_wait+0x376/0xa00 [ 654.993026][T27005] kernel_wait4+0x14c/0x260 [ 654.998722][T27005] __do_sys_wait4+0x13f/0x150 [ 655.003969][T27005] do_syscall_64+0x2d/0x70 [ 655.008723][T27005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 655.014982][T27005] [ 655.017609][T27005] The buggy address belongs to the object at ffff8880322d2680 [ 655.017609][T27005] which belongs to the cache radix_tree_node of size 576 [ 655.032927][T27005] The buggy address is located 56 bytes inside of [ 655.032927][T27005] 576-byte region [ffff8880322d2680, ffff8880322d28c0) [ 655.050658][T27005] The buggy address belongs to the page: [ 655.057514][T27005] page:00000000cd0ff298 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x322d0 [ 655.069462][T27005] head:00000000cd0ff298 order:2 compound_mapcount:0 compound_pincount:0 [ 655.078531][T27005] flags: 0xfff00000010200(slab|head) [ 655.085554][T27005] raw: 00fff00000010200 ffffea0001a13600 0000000600000006 ffff888010c4db40 [ 655.095322][T27005] raw: 0000000000000000 0000000080170017 00000001ffffffff 0000000000000000 [ 655.104170][T27005] page dumped because: kasan: bad access detected [ 655.112019][T27005] [ 655.115480][T27005] Memory state around the buggy address: [ 655.121658][T27005] ffff8880322d2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.131440][T27005] ffff8880322d2600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 655.140280][T27005] >ffff8880322d2680: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.151084][T27005] ^ [ 655.158675][T27005] ffff8880322d2700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.168505][T27005] ffff8880322d2780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 655.178042][T27005] ================================================================== [ 655.187496][T27005] Disabling lock debugging due to kernel taint [ 655.208519][T27023] device hsr0 left promiscuous mode [ 655.347445][T27030] device hsr0 entered promiscuous mode [ 655.368900][T27030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.448424][T27005] Kernel panic - not syncing: panic_on_warn set ... [ 655.459196][T27005] CPU: 0 PID: 27005 Comm: syz-executor.3 Tainted: G B 5.11.0-syzkaller #0 [ 655.470269][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.482052][T27005] Call Trace: [ 655.496693][T27005] dump_stack+0x107/0x163 [ 655.501891][T27005] ? idr_for_each+0x170/0x220 [ 655.508156][T27005] panic+0x306/0x73d [ 655.513013][T27005] ? __warn_printk+0xf3/0xf3 [ 655.520299][T27005] ? preempt_schedule_common+0x59/0xc0 [ 655.527569][T27005] ? idr_for_each+0x206/0x220 [ 655.533608][T27005] ? preempt_schedule_thunk+0x16/0x18 [ 655.540677][T27005] ? trace_hardirqs_on+0x38/0x1c0 [ 655.548209][T27005] ? trace_hardirqs_on+0x51/0x1c0 [ 655.553656][T27005] ? idr_for_each+0x206/0x220 [ 655.559777][T27005] ? idr_for_each+0x206/0x220 [ 655.565490][T27005] end_report+0x58/0x5e [ 655.571051][T27005] kasan_report.cold+0x67/0xd5 [ 655.577206][T27005] ? idr_for_each+0x206/0x220 [ 655.583206][T27005] ? io_uring_add_task_file+0x2a0/0x2a0 [ 655.590093][T27005] idr_for_each+0x206/0x220 [ 655.596334][T27005] ? idr_find+0x50/0x50 [ 655.602304][T27005] ? lockdep_hardirqs_on+0x79/0x100 [ 655.608204][T27005] ? io_poll_remove_all+0x1df/0x240 [ 655.614901][T27005] io_ring_ctx_wait_and_kill+0x1bd/0x600 [ 655.622630][T27005] ? ima_file_free+0xb6/0x420 [ 655.629248][T27005] io_uring_release+0x3e/0x50 [ 655.635132][T27005] __fput+0x283/0x920 [ 655.639846][T27005] ? io_ring_ctx_wait_and_kill+0x600/0x600 [ 655.648763][T27005] task_work_run+0xdd/0x190 [ 655.654525][T27005] do_exit+0xc5c/0x2ae0 [ 655.659089][T27005] ? find_held_lock+0x2d/0x110 [ 655.665306][T27005] ? mm_update_next_owner+0x7a0/0x7a0 [ 655.672988][T27005] ? get_signal+0x332/0x20f0 [ 655.678601][T27005] ? lock_downgrade+0x6d0/0x6d0 [ 655.683674][T27005] do_group_exit+0x125/0x310 [ 655.689364][T27005] get_signal+0x427/0x20f0 [ 655.694573][T27005] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 655.701766][T27005] ? sock_do_ioctl+0x168/0x2d0 [ 655.707143][T27005] ? compat_ifr_data_ioctl+0x150/0x150 [ 655.713196][T27005] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 655.720623][T27005] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 655.727877][T27005] ? __sanitizer_cov_trace_switch+0xb7/0xf0 [ 655.734898][T27005] ? copy_siginfo_to_user32+0xa0/0xa0 [ 655.741712][T27005] ? sock_ioctl+0x418/0x6a0 [ 655.747872][T27005] ? kick_process+0xe0/0x180 [ 655.752486][T27005] ? task_work_add+0x97/0x180 [ 655.758050][T27005] exit_to_user_mode_prepare+0x148/0x250 [ 655.764482][T27005] syscall_exit_to_user_mode+0x19/0x50 [ 655.770661][T27005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 655.779459][T27005] RIP: 0033:0x466019 [ 655.785031][T27005] Code: Unable to access opcode bytes at RIP 0x465fef. [ 655.793391][T27005] RSP: 002b:00007f2e6f589188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 655.805065][T27005] RAX: 0000000000000000 RBX: 000000000056c008 RCX: 0000000000466019 [ 655.815372][T27005] RDX: 0000000020000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 655.824605][T27005] RBP: 00000000004bd067 R08: 0000000000000000 R09: 0000000000000000 [ 655.833700][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 655.842073][T27005] R13: 0000000000a9fb1f R14: 00007f2e6f589300 R15: 0000000000022000 [ 655.861526][T27005] Kernel Offset: disabled [ 655.867410][T27005] Rebooting in 86400 seconds..